Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/K2od4L3-AFJKPNDChn9togIxSkc.roa
File: K2od4L3-AFJKPNDChn9togIxSkc.roa (raw, json)
Hash identifier: JciZjq1FyD2OQc5dRHlt3q3QU2Zyx5SjJUBNqo/04/0=
Subject key identifier: 2B:6A:1D:E0:BD:FE:00:52:4A:3C:D0:C2:86:7F:6D:A2:02:31:4A:47
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0204
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K2od4L3-AFJKPNDChn9togIxSkc.roa
Signing time: Mon 01 May 2023 01:35:45 +0000
ROA not before: Mon 01 May 2023 01:35:45 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 36.8.0.0/13 maxlen: 13
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:35:45 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=2B6A1DE0BDFE00524A3CD0C2867F6DA202314A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:04:c6:73:69:32:3a:b7:fc:3e:3c:ee:64:
a4:74:e1:9f:d6:f4:96:f6:e4:c3:b8:a5:63:a8:73:
84:5a:f0:67:f9:2a:b4:9b:54:44:be:52:63:b1:72:
bc:ae:b8:11:b4:80:c1:72:ea:d5:d8:53:83:2f:84:
fb:85:6a:50:13:2a:57:22:23:48:4b:c5:b4:fa:49:
40:c0:c9:26:bb:31:ce:4b:38:27:ec:45:28:cf:c3:
cc:67:b4:d7:66:84:53:9a:24:8a:fd:03:71:7c:91:
96:cb:fd:9f:4f:64:7e:90:83:86:26:f9:d9:3f:1d:
5d:55:78:40:58:7b:8c:6c:a3:06:e5:11:c4:d6:a0:
2f:ab:9a:95:05:14:c3:33:d5:2d:ec:b3:6a:6e:da:
cf:05:f5:2e:e0:41:43:3f:66:a4:48:3f:6e:f1:2d:
4f:e6:6e:77:d0:19:d4:b1:6b:3e:05:70:97:95:bb:
e4:1d:0e:79:da:88:a9:95:f5:b2:0f:55:10:07:65:
b8:16:fb:9c:e6:9b:ed:31:ef:da:e8:92:7f:c9:2d:
ff:a3:b0:13:81:7a:ce:49:d2:3d:e0:7b:4f:cc:e0:
1e:dc:3b:c5:6a:ee:03:47:b2:57:e5:28:51:2b:96:
bb:78:f9:46:78:46:b0:2c:03:a2:20:6c:9c:0b:d3:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:1D:E0:BD:FE:00:52:4A:3C:D0:C2:86:7F:6D:A2:02:31:4A:47
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K2od4L3-AFJKPNDChn9togIxSkc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.8.0.0/13
Signature Algorithm: sha256WithRSAEncryption
32:2a:ec:2e:95:7a:b3:bf:3e:ce:53:48:d9:eb:22:02:9d:92:
b3:90:2a:51:a7:fe:5d:ab:23:75:95:41:8e:0e:b4:36:21:f2:
cf:e4:63:f5:27:40:0b:47:86:cb:4a:bf:3c:5e:75:77:5f:71:
aa:00:2a:4e:3d:00:78:af:46:6b:6b:08:c0:70:db:e0:f3:93:
74:4b:a4:13:ef:24:02:c2:e7:37:ca:c0:ca:0a:a1:1c:6f:ac:
8b:dc:06:6d:e9:c3:2e:55:16:af:36:7d:38:fd:51:8e:02:d3:
8c:57:2c:8f:73:ee:21:67:5c:53:ad:17:32:64:ba:60:c9:e5:
8b:2d:7e:d3:65:18:c6:8b:08:50:0e:55:6b:bb:d9:98:5f:47:
0a:91:60:fb:7f:c7:c7:c2:83:4b:6f:fc:e3:40:b6:df:f6:4d:
2f:2e:94:6e:d0:8f:03:43:95:3e:f5:02:c6:63:1f:c3:b3:72:
e1:e9:7e:c5:84:3e:76:d8:3a:8c:97:d8:99:bc:82:0c:c1:bd:
37:2b:03:f7:7c:ca:14:4f:c7:28:c2:0c:e8:c7:18:6c:fe:d7:
d6:9a:8e:54:56:c1:4d:74:1d:57:de:02:10:0a:72:f3:20:bc:
4b:d7:50:b8:40:bd:65:4c:75:05:c6:8d:1d:5a:af:dd:b2:5e:
93:de:75:e3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM1NDVaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJCNkExREUwQkRGRTAw
NTI0QTNDRDBDMjg2N0Y2REEyMDIzMTRBNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFzgTGc2kyOrf8PjzuZKR04Z/W9Jb25MO4pWOoc4Ra8Gf5KrSb
VES+UmOxcryuuBG0gMFy6tXYU4MvhPuFalATKlciI0hLxbT6SUDAySa7Mc5LOCfs
RSjPw8xntNdmhFOaJIr9A3F8kZbL/Z9PZH6Qg4Ym+dk/HV1VeEBYe4xsowblEcTW
oC+rmpUFFMMz1S3ss2pu2s8F9S7gQUM/ZqRIP27xLU/mbnfQGdSxaz4FcJeVu+Qd
DnnaiKmV9bIPVRAHZbgW+5zmm+0x79rokn/JLf+jsBOBes5J0j3ge0/M4B7cO8Vq
7gNHslflKFErlrt4+UZ4RrAsA6IgbJwL0/99AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUK2od4L3+AFJKPNDChn9togIxSkcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0syb2Q0TDMtQUZKS1BORENobjl0b2dJeFNrYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMkCDANBgkqhkiG9w0BAQsFAAOCAQEAMirsLpV6s78+zlNI2esiAp2Ss5Aq
Uaf+XasjdZVBjg60NiHyz+Rj9SdAC0eGy0q/PF51d19xqgAqTj0AeK9Ga2sIwHDb
4POTdEukE+8kAsLnN8rAygqhHG+si9wGbenDLlUWrzZ9OP1RjgLTjFcsj3PuIWdc
U60XMmS6YMnliy1+02UYxosIUA5Va7vZmF9HCpFg+3/Hx8KDS2/840C23/ZNLy6U
btCPA0OVPvUCxmMfw7Ny4el+xYQ+dtg6jJfYmbyCDMG9NysD93zKFE/HKMIM6McY
bP7X1pqOVFbBTXQdV94CEApy8yC8S9dQuEC9ZUx1BcaNHVqv3bJek9514w==
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org